StaleWP tracks WordPress plugins that have gone quiet, so site owners and agencies can see which ones need a decision.
What we publish
- Risk Radar: every quarter, on the 2nd of February, May, August and November. Popular plugins, placed by how soon to act, with the evidence and alternatives for each.
- StaleWP Newsletter: free, on the first and third Tuesday of each month. What changed in the plugin directory.
Who we are
StaleWP is run by Abhishek Deshpande and Nikita Sawarkar. Both have been part of the WordPress ecosystem and community for more than a decade.
Why we started
In our 31 October 2026 snapshot, 60% of the 77,501 plugins in the directory had gone six months without an update. Some of those plugins are finished and fine. Others run important jobs on real sites with nobody watching them. Directory pages do not make that difference easy to see.
How we work
- We use public data: the WordPress.org directory, public reviews and WPVulnerability records.
- We use AI tools to help analyse the data and draft the text of entries.
- We show the evidence and the check date on every plugin page.
- Placements are our opinion. Quiet does not automatically mean unsafe.
- One of us reviews every entry before it is published.
- We do not test the alternatives we list.
- We do not contact plugin owners before publishing. Everything we use is already public, and no one approves a placement.
- We do not publish unpatched vulnerabilities that are not already public.
Independence
No one can pay to appear on the radar or to change a placement. If a conflict ever applies to a plugin, we disclose it on that page. StaleWP is not affiliated with WordPress.org or the WordPress Foundation.
Corrections
If a fact on StaleWP is wrong, email [email protected] with the page link and the correct information. We check every report and correct confirmed mistakes. Plugin owners are welcome to write too. Each edition shows the data from its check date, so if a plugin is updated after that, the next edition shows the change.